Skip to content
OpenAdvisories

Vendor

Chroma

6 known vulnerabilities.

Products

ChromaDB 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-45833 Public exploit

    ChromaDB has a code injection vulnerability

    A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/defa…

    Chroma ChromaDB chromadb PyPI
  • Critical 10.0
    CVE-2026-45829 Public exploit EPSS 15%

    ChromaDB Python project has a pre-authentication code injection vulnerability

    A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the…

    Chroma ChromaDB chromadb PyPI